This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/fDiCNg82Ceatc0-Kb7qP2rEq54Q.roa File: fDiCNg82Ceatc0-Kb7qP2rEq54Q.roa (raw, json) Hash identifier: OXn/GJfiGWG/hkB4epjpbpxfqCnDFVPW115sflUVJ1Y= Subject key identifier: 7C:38:82:36:0F:36:09:E6:AD:73:4F:8A:6F:BA:8F:DA:B1:2A:E7:84 Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f Certificate serial: 019B79ECB4BF05C5F6DD257EF3034FA46F5A Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/fDiCNg82Ceatc0-Kb7qP2rEq54Q.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49040 IP address blocks: 91.192.236.0/24 maxlen: 24 193.93.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b4:bf:05:c5:f6:dd:25:7e:f3:03:4f:a4:6f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c3882360f3609e6ad734f8a6fba8fdab12ae784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fb:86:cf:f9:4c:b1:b9:e4:b5:b3:12:28:d7: 87:c5:d9:01:d6:9e:c5:d5:b8:e4:6a:e0:8b:ce:d3: 11:4a:54:a2:d2:82:4e:bd:32:bf:2f:34:30:46:0a: 44:c1:c3:5b:99:e3:19:84:90:85:67:8c:38:27:cb: 53:ce:49:72:40:68:83:cf:5f:99:21:51:a8:aa:3a: 95:fe:bb:30:d3:fd:bc:f9:df:93:20:27:a7:33:5b: c7:7a:a3:39:ad:a5:28:98:36:a3:63:a9:e5:06:fa: eb:be:20:e8:7c:9d:de:4f:db:60:23:a0:a6:2c:7f: 9a:94:6a:d4:a3:a6:13:88:a3:04:64:e2:30:05:29: 6d:ba:55:42:86:2b:4e:81:2a:e1:60:59:7d:31:84: c7:8d:40:6a:01:6c:ad:5b:63:5d:bc:85:4b:58:0f: 1b:34:a6:c1:5d:b8:7b:99:61:3b:09:f5:82:db:28: e1:cd:98:61:f0:b4:90:3c:4b:76:3b:b7:6e:30:72: ad:72:88:52:33:e9:bc:8b:1b:78:75:90:15:a6:10: d0:40:dc:7b:02:b7:f7:f3:5e:95:26:10:5a:36:95: bb:17:df:86:28:4c:59:7b:16:1e:f5:62:55:e5:7d: 1b:93:46:a1:89:48:6b:9d:56:92:df:c4:89:00:1d: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:38:82:36:0F:36:09:E6:AD:73:4F:8A:6F:BA:8F:DA:B1:2A:E7:84 X509v3 Authority Key Identifier: keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/fDiCNg82Ceatc0-Kb7qP2rEq54Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.236.0/24 193.93.26.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:21:2a:a9:76:18:db:85:4d:55:51:07:76:2c:de:e4:09:4c: fe:87:19:2e:44:81:6a:41:2a:73:8e:dc:e1:4a:a6:4c:99:ac: 8b:10:62:46:4a:82:58:7a:f9:3f:40:32:3a:2e:6c:1c:7a:57: 4f:59:e9:69:95:5e:f3:9e:e4:4c:af:97:10:0e:ca:1a:18:0a: 1d:80:77:13:74:7e:20:4a:5a:24:07:e3:14:ef:ad:e8:fe:48: a4:d6:27:c4:7f:5b:cf:50:92:33:ec:04:df:f4:b1:f5:0f:e3: dc:f6:09:1d:5c:2d:ba:67:dc:84:c5:68:e5:d8:4a:9f:d9:a8: ee:5d:9d:ba:11:8d:31:c1:73:5b:b3:ce:2d:c1:84:4b:91:45: 4f:cb:d9:f6:cd:30:b5:27:de:b4:e9:e3:f2:74:d5:52:1c:df: 47:fc:22:57:79:b5:91:69:00:69:3b:20:9b:f0:ff:b9:c1:e7: 50:a8:59:67:df:4b:c2:c4:57:19:fb:e5:da:2d:75:14:a4:64: 86:25:3d:ab:3b:4e:83:63:23:31:f9:f9:7a:1c:44:e3:9b:9a: 2f:b5:aa:8a:04:32:91:35:b3:ed:1c:b9:87:c5:89:0f:78:35: 42:57:19:fa:42:7f:de:e5:03:58:54:60:68:ee:89:6c:48:6b: dd:4c:88:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57LS/BcX23SV+8wNPpG9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjODdiOWNmYzNlZTBjNDQ5NjVlYTIwOWMwNGZkOGU4ZjQ4 ZmE0MmYwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzM4ODIzNjBmMzYwOWU2YWQ3MzRmOGE2ZmJhOGZkYWIxMmFlNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fuGz/lMsbnktbMSKNeHxdkB1p7F 1bjkauCLztMRSlSi0oJOvTK/LzQwRgpEwcNbmeMZhJCFZ4w4J8tTzklyQGiDz1+Z IVGoqjqV/rsw0/28+d+TICenM1vHeqM5raUomDajY6nlBvrrviDofJ3eT9tgI6Cm LH+alGrUo6YTiKMEZOIwBSltulVChitOgSrhYFl9MYTHjUBqAWytW2NdvIVLWA8b NKbBXbh7mWE7CfWC2yjhzZhh8LSQPEt2O7duMHKtcohSM+m8ixt4dZAVphDQQNx7 Arf3816VJhBaNpW7F9+GKExZexYe9WJV5X0bk0ahiUhrnVaS38SJAB2aOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHw4gjYPNgnmrXNPim+6j9qxKueEMB8GA1UdIwQY MBaAFLyHuc/D7gxEll6iCcBP2Oj0j6QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgt NDVmYWJlM2Y5ZjMzLzEvZkRpQ05nODJDZWF0YzAtS2I3cVAyckVxNTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgtNDVmYWJlM2Y5ZjMz LzEvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8DsAwQA wV0aMA0GCSqGSIb3DQEBCwUAA4IBAQA/ISqpdhjbhU1VUQd2LN7kCUz+hxkuRIFq QSpzjtzhSqZMmayLEGJGSoJYevk/QDI6LmwceldPWelplV7znuRMr5cQDsoaGAod gHcTdH4gSlokB+MU763o/kik1ifEf1vPUJIz7ATf9LH1D+Pc9gkdXC26Z9yExWjl 2Eqf2ajuXZ26EY0xwXNbs84twYRLkUVPy9n2zTC1J9606ePydNVSHN9H/CJXebWR aQBpOyCb8P+5wedQqFln30vCxFcZ++XaLXUUpGSGJT2rO06DYyMx+fl6HETjm5ov taqKBDKRNbPtHLmHxYkPeDVCVxn6Qn/e5QNYVGBo7olsSGvdTIi/ -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:05 2026 by rpki-client